CVE-2026-68808

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-17061

creationtimestamp| type| source ---|---|--- 2026-08-11 15:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msswmkwrtv2o...

CVE-2026-48161

creationtimestamp| type| source ---|---|--- 2026-08-10 23:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msran7w43c2v 2026-08-11 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117073932098519347 2026-08-11 00:00:37+00:00| seen|...

CVE-2026-72911

creationtimestamp| type| source ---|---|--- 2026-08-10 21:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqzwphlo425 2026-08-10 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr3y6rwf324...

CVE-2026-72864

creationtimestamp| type| source ---|---|--- 2026-08-10 19:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtkshfew2z 2026-08-10 20:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvcczrjp2h...

MINI-8JVW-WGV3-HP5J

Bulletin has no description...

CVE-2026-16626

creationtimestamp| type| source ---|---|--- 2026-08-10 19:22:35+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqt4k3bcc2v...

CGA-6X9F-W6MR-2RRJ

Bulletin has no description...

CVE-2026-68152

creationtimestamp| type| source ---|---|--- 2026-08-10 13:53:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117071543148752935...

DEBIAN-CVE-2026-68408

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsrfreewk to wiphywork to fix deadlock When a netlink socket that owns a PMSR session is closed, cfg80211releasepmsr clears the request's nlportid and queues pmsrfreewk to call cfg80211pmsrprocessabort...

DEBIAN-CVE-2026-68285

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpfjitfree When bpfintjitcompile is called for subprograms, it returns early during the first pass !prog-isfunc || extrapass is false, keeping ctx-offset alive for the subsequent extra pass. If...

MINI-WQR5-3QFJ-VP55

Bulletin has no description...

Student Information System register.php Cross-Site Scripting Vulnerability

Student Information System is a student information system. The Student Information System suffers from a cross-site scripting vulnerability that stems from the mishandling of user input by an unspecified functional component in the /register.php file. An attacker can exploit this vulnerability b...

chromium-browser: CSP bypass in unspecified component

core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy CSP restrictions by providing an image from an unintended source...

Cross site scripting

Cross-site scripting XSS vulnerability in Tyler Technologies TaxWeb 3.13.3.1 allows remote attackers to inject arbitrary web script or HTML via the accountNum parameter to an unspecified component...

Cross site scripting

Cross-site scripting XSS vulnerability in Corporater EPM Suite allows remote attackers to inject arbitrary web script or HTML via the customerId parameter to an unspecified component...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote attackers to inject arbitrary web script or HTML via the reportType parameter to an unspecified component...

CVE-2008-7030

Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be...

CVE-2008-4408

Cross-site scripting XSS vulnerability in MediaWiki 1.13.1, 1.12.0, and possibly other versions before 1.13.2 allows remote attackers to inject arbitrary web script or HTML via the useskin parameter to an unspecified component...

Directory traversal

Directory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter to an unspecified component...